CVE-2023-33063: Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2023-12-05
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-33063?
CVE-2023-33063 is a use-after-free vulnerability in DSP Services found in multiple Qualcomm chipsets.
How does the use-after-free vulnerability in DSP Services occur?
The use-after-free vulnerability in DSP Services occurs due to memory corruption during a remote call from HLOS to DSP.
Which software is affected by CVE-2023-33063?
Google Android and Qualcomm Multiple Chipsets are affected by CVE-2023-33063.
What is the severity of CVE-2023-33063?
CVE-2023-33063 has a severity value of 7, which is considered high.
How can I fix the use-after-free vulnerability in DSP Services?
To fix the use-after-free vulnerability in DSP Services, apply the patches and updates provided by Google and Qualcomm.